Juniper EX9200 Series

service-filter-hit; # NOT valid at this level
(source-class [ class-names ] | source-class-except [ class-names ]); # NOT
valid at this level
tcp-established; # NOT valid at this level
tcp-flags flag; # NOT valid at this level
tcp-initial; # NOT valid at this level
}
then {
(ignore | note);
log;
sample;
syslog;
}
}
}
filter filter-name {
accounting-profile [ profile-names ];
interface-specific;
term term-name {
filter filter-name;
from {
... statements in Common IP Firewall Match Conditions on page 35 PLUS ...
(next-header [ protocol-types ] | next-header-except [ protocol-types ]);
(traffic-class [ code-point-values ] | traffic-class-except [ code-point-values ]);
}
then {
... statements in Common Firewall Actions on page 33 AND
statements in Common IP Firewall Actions on page 34 PLUS ...
(accept | discard | reject <address-unreachable | administratively-prohibited |
beyond-scope | fragmentation-needed | no-route | port-unreachable |
tcp-reset>);
}
}
}
service-filter filter-name {
term term-name {
from {
address {
ip-prefix</prefix-length>;
}
(ah-spi [ values ] | ah-spi-except [ values ]);
destination-address {
ip-prefix</prefix-length>;
}
(destination-port [ port-names ] | destination-port-except [ port-names ]);
destination-prefix-list {
list-name;
}
(esp-spi [ values ] | esp-spi-except [ values ]);
(interface-group [ group-names ] | interface-group-except [ group-names ]);
(next-header [ protocol-types ] | next-header-except [ protocol-types ]);
(port [ port-names ] | port-except [ port-names ]);
prefix-list {
list-name;
}
source-address {
Copyright © 2013, Juniper Networks, Inc.44
Class of Service Overview and Examples for EX9200 Switches